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In the claims r The claims are as follows. 

1. (Currently amended) A method for registering a UE with an IMS 
so as to allow the UE to access, over a digital communication 
system, an IM service to which the UE is subscribed, the method 
including a step in which an S-CSCF of the IMS sends an AV 
request message (CMl) to an HSS f the method characterized in that 
it includes a step in which in response to the AV request message 
(CMfr K the HSS provides (31) in a AV request response message 
(CM2) a field indicating a list of services to which the UE is 
subscribed along with either information that allows establishing 
SAs for each such service or information that could be used as 
keying material or other input for other security mechanisms 
specific to each service. 

2. (Currently amended) The method as in claim 1, further 
characterized in that in responding to the AV request response 
message (CM2 ) , the S-CSCF of the IMS adds (32) the information 
included in the AV request response message (CM2) to an 
authorization challenge message - (5M4) and forwards it to an I- 
CSCP of the IMS. 

3. (Currently amended) The method as in claim 2, further 
characterized in that when the I-CSCF receives the authorization 
challenge message (SMI) , it forwards (.33) it as a forwarded 
authorization challenge message (CMS) to a P-CSCF of the IMS, 
which parses (31) the forwarded authorization challenge message 
-£SM&f , generates SPD entries and corresponding SAs for both P- 
CSCF and UE, inserts its SPD entries in its SPD and corresponding 
SAs into its SADB, and provides in an updated authorization 
challenge message (CMC) for the UE the SPD entries and 
corresponding SAs . 
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4. (Currently amended) The method as in claim 3, further 
characterized in that after receiving the updated authorization 
challenge message (SMC) , the UE inserts (35) the SPD entries into 
its SPD and inserts the corresponding SAs into its SADB . 

5. (Original) The method as in claim 4, further character ized in 
that a register is kept for all services to allocate numbers used 
to derive keys for each service or part of a service. 

6. (Previously presented) The method as in claim 5, further 
characterized in that the keys are an integrity key and a cipher 
key and are derived by applying a mapping to an argument 
including the number allocated to the respective service or part 
of a service by the register being kept. 

7. (Currently amended) A method for registering a UE with an IMS 
so as to allow the UE to access, over a digital communication 
system, an IM service to which the UE is subscribed, the method 
including a step in which a P-CSCF of the IMS communicates to the 
UE an authorization challenge message-— fSMS-)-, characterized in 
that the authorization challenge message (SMS) includes at least 
one SPD entry and a corresponding SA derived by the P-CSCP from 
information provided to the P-CSCF indicating services to which 
the UE is subscribed along with either information that allows 
establishing SAs for each such service or information that could 
be used as keying material or other input for other security 
mechanisms specific to each service, and the UE inserts— the 
at least one SPD entry into its SPD and the corresponding SA into 
its SADB, so that for a predetermined time any traffic between 
the UE and the P-CSCF is secure for the services to which the UE 
is subscribed. 

8. (Original) The method as in claim 7, further characterized in 
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that a register is kept for all services to allocate numbers used 
to derive keys for each service or part of a service. 

9. (Previously presented) The method aa in claim 8, further 
characterized in that the keys are an integrity key and a cipher 
key and are derived by applying a mapping to an argument 
including the number allocated to the respective service or part 
of a service by the register being kept. 

10. (Currently amended) A UE, comprising: means for receiving an 
authorization challenge message ( S MS) from a P-CSCF of an IMS, 
wherein the authorization challenge message— { SM6) includes at 
least one SPD entry and a corresponding SA derived by the P-CSCF 
from information provided to the P-CSCF indicating services to 
which the UE is subscribed along with either information that 
allows establishing SAs for each such service or information that 
could be used as keying material or other input for other 
security mechanisms specific to each service, and means (35) for 
inserting the at least one SPD entry into its SPD and the 
corresponding SA into its SADB, so that for a predetermined time 
any traffic between the UE and the P-CSCF is secure for the 
services to which the UE is subscribed. 

11. (Currently amended) A digital communication system 
comprising an IMS having an S-CSCF and an HSS, wherein the S-CSCF 
includes means for sending an AV request message (CMl) - to the 
HSS, and the HSS includes means for providing, in response to the 

AV request messag e (CM1) , a AV request response message (CM 2) 

including a field indicating a list of services to which a UE is 
subscribed along with either information that allows establishing 
SAs for each such service or information that could be used as 
keying material or other input for other security mechanisms 
specific to each service. 
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